FBI: check for DNS Changer malware before it’s too late

Previously, on The Internet: millions of computers across the globe were infected by malware called DNS Changer. The software targeted both PCs and Macs, and redirected users away from websites to ones that were deployed by cybercriminals. The new websites were filled with advertisements, with enough views and click throughs generating millions of dollars worth of revenue for the bad guys.

The servers were eventually intercepted by the FBI in Estonia. While they were tweaked to disable the adverts, they’re still active so as not to disrupt service for those who are still infected by DNS Changer. The FBI, however, plan to disable the servers in July, which could mean as many as 450,000 people would suddenly be unable to access the internet.

DNS Changer, as the name implies, changes the DNS settings of the OS to redirect traffic to the malicious servers. Once the FBI pull the plug on the servers, the DNS address will not longer exist, and those trying to access the internet will be met with an error instead. Either the DNS settings have to be altered, or the malware needs to be removed with an anti-virus program.

The DNS Changer Working Group has set up a webpage that will check if you’ve been infected with the malware. Point your browser here, and if it turns out to be positive (the image background will flash red), then you need to take steps to remove it. The FBI will be shutting the servers on July 9th, so better to check sooner rather than later.